staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges to execute arbitrary commands as
SYSTEM. An attacker can place a crafted installer options file that is
processed by the Advanced Asset Management installer during service activation.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TeamViewer | Full Client | unaffected |
|
|||||||||
| TeamViewer | Host | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Update to the latest available version.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 27 Oct 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation. | |
| Title | Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows | |
| Weaknesses | CWE-269 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: TV
Published:
Updated: 2026-10-27T15:15:44.411Z
Reserved: 2026-10-16T13:05:08.747Z
Link: CVE-2026-111583
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-27T16:17:29.643
Modified: 2026-10-27T16:17:29.643
Link: CVE-2026-111583
Redhat
No data.
OpenCVE Enrichment
No data.